Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

 Sponsor

Project: psi-probe-rest

com.github.psi-probe:psi-probe-rest:5.2.2-SNAPSHOT

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
accessors-smart-2.5.2.jarpkg:maven/net.minidev/accessors-smart@2.5.2 043
angus-activation-2.0.2.jarpkg:maven/org.eclipse.angus/angus-activation@2.0.2 035
asm-9.8.jarpkg:maven/org.ow2.asm/asm@9.8 054
commons-logging-1.3.5.jarpkg:maven/commons-logging/commons-logging@1.3.5 0129
error_prone_annotations-2.38.0.jarpkg:maven/com.google.errorprone/error_prone_annotations@2.38.0 029
j2objc-annotations-3.0.0.jarpkg:maven/com.google.j2objc/j2objc-annotations@3.0.0 033
jakarta.activation-api-2.1.3.jarpkg:maven/jakarta.activation/jakarta.activation-api@2.1.3 045
json-path-2.9.0.jarcpe:2.3:a:json-path:jayway_jsonpath:2.9.0:*:*:*:*:*:*:*pkg:maven/com.jayway.jsonpath/json-path@2.9.0 0Highest34
json-smart-2.5.2.jarcpe:2.3:a:json-smart_project:json-smart:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:json-smart_project:json-smart-v2:2.5.2:*:*:*:*:*:*:*		pkg:maven/net.minidev/json-smart@2.5.2 0Highest51
jsr305-3.0.2.jarpkg:maven/com.google.code.findbugs/jsr305@3.0.2 017
micrometer-commons-1.14.8.jarcpe:2.3:a:4d:4d:1.14.8:*:*:*:*:*:*:*pkg:maven/io.micrometer/micrometer-commons@1.14.8 0Low65
slf4j-api-2.0.17.jarpkg:maven/org.slf4j/slf4j-api@2.0.17 029
spotbugs-annotations-4.9.3.jarpkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.3 053
spring-core-6.2.8.jarcpe:2.3:a:pivotal_software:spring_framework:6.2.8:*:*:*:*:*:*:*
cpe:2.3:a:springsource:spring_framework:6.2.8:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_framework:6.2.8:*:*:*:*:*:*:*		pkg:maven/org.springframework/spring-core@6.2.8 0Highest41
spring-hateoas-2.5.1.jarcpe:2.3:a:vmware:spring_hateoas:2.5.1:*:*:*:*:*:*:*pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1 0Highest46
spring-plugin-core-3.0.0.jarpkg:maven/org.springframework.plugin/spring-plugin-core@3.0.0 042
spring-web-6.2.8.jarcpe:2.3:a:pivotal_software:spring_framework:6.2.8:*:*:*:*:*:*:*
cpe:2.3:a:springsource:spring_framework:6.2.8:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_framework:6.2.8:*:*:*:*:*:*:*
cpe:2.3:a:web_project:web:6.2.8:*:*:*:*:*:*:*		pkg:maven/org.springframework/spring-web@6.2.8 0Highest35

Dependencies (vulnerable)

accessors-smart-2.5.2.jar

Description:

Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/minidev/accessors-smart/2.5.2/accessors-smart-2.5.2.jar
MD5: 24191e0bb215c72902e89f46dde839e1
SHA1: ce16fd235cfee48e67eda33e684423bba09f7d07
SHA256:9b8a7bc43861d6156c021166d941fb7dddbe4463e2fa5ee88077e4b01452a836
Referenced In Project/Scope: psi-probe-rest:compile
accessors-smart-2.5.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/net.minidev/json-smart@2.5.2

Identifiers

angus-activation-2.0.2.jar

Description:

 Implementation

License:

http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-activation/2.0.2/angus-activation-2.0.2.jar
MD5: 42bba74155dc773eca277ee7a16f74be
SHA1: 41f1e0ddd157c856926ed149ab837d110955a9fc
SHA256:6dd3bcffc22bce83b07376a0e2e094e4964a3195d4118fb43e380ef35436cc1e
Referenced In Project/Scope: psi-probe-rest:compile
angus-activation-2.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.2.2-SNAPSHOT

Identifiers

asm-9.8.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.8/asm-9.8.jar
MD5: f5adf3bfc54fb3d2cd8e3a1f275084bc
SHA1: dc19ecb3f7889b7860697215cae99c0f9b6f6b4b
SHA256:876eab6a83daecad5ca67eb9fcabb063c97b5aeb8cf1fca7a989ecde17522051
Referenced In Project/Scope: psi-probe-rest:compile
asm-9.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/javabean-tester@2.9.0

Identifiers

commons-logging-1.3.5.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.3.5/commons-logging-1.3.5.jar
MD5: 9ca067b073153c86c2da350c0f2cdf70
SHA1: a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1
SHA256:6d7a744e4027649fbb50895df9497d109f98c766a637062fe8d2eabbb3140ba4
Referenced In Project/Scope: psi-probe-rest:compile
commons-logging-1.3.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.2.2-SNAPSHOT

Identifiers

error_prone_annotations-2.38.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.38.0/error_prone_annotations-2.38.0.jar
MD5: 912f8206614000252841d89cb0461895
SHA1: fc0ae991433e8590ba51cd558421478318a74c8c
SHA256:6661d5335090a5fc61dd869d2095bc6c1e2156e3aa47a6e4ababdf64c99a7889
Referenced In Project/Scope: psi-probe-rest:provided
error_prone_annotations-2.38.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.2.2-SNAPSHOT

Identifiers

j2objc-annotations-3.0.0.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar
MD5: f59529b29202a5baf37f491ea5ec8627
SHA1: 7399e65dd7e9ff3404f4535b2f017093bdb134c7
SHA256:88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64
Referenced In Project/Scope: psi-probe-rest:provided
j2objc-annotations-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.2.2-SNAPSHOT

Identifiers

jakarta.activation-api-2.1.3.jar

Description:

  Specification

License:

EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar
MD5: 76e7b680375ea9f40f3ddbd702efcd25
SHA1: fa165bd70cda600368eee31555222776a46b881f
SHA256:01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627
Referenced In Project/Scope: psi-probe-rest:compile
jakarta.activation-api-2.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.2.2-SNAPSHOT

Identifiers

json-path-2.9.0.jar

Description:

A library to query and verify JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/jayway/jsonpath/json-path/2.9.0/json-path-2.9.0.jar
MD5: e89678d2e4ff45e4f39a97ccd0223719
SHA1: 37fe2217f577b0b68b18e62c4d17a8858ecf9b69
SHA256:11a9ee6f88bb31f1450108d1cf6441377dec84aca075eb6bb2343be157575bea
Referenced In Project/Scope: psi-probe-rest:compile
json-path-2.9.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.2.2-SNAPSHOT

Identifiers

json-smart-2.5.2.jar

Description:

JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/minidev/json-smart/2.5.2/json-smart-2.5.2.jar
MD5: e3ad34c55c0d2627255f79f4411c6bdd
SHA1: 95d166b18f95907be0f46cdb9e1c0695eed03387
SHA256:4fbdedb0105cedc7f766b95c297d2e88fb6a560da48f3bbaa0cc538ea8b7bf71
Referenced In Project/Scope: psi-probe-rest:compile
json-smart-2.5.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.2.2-SNAPSHOT

Identifiers

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: psi-probe-rest:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.3

Identifiers

micrometer-commons-1.14.8.jar

Description:

Module containing common code

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.14.8/micrometer-commons-1.14.8.jar
MD5: afc6a3ed0d778c9748ed3636d5bfac35
SHA1: 51baec7ebe61f1cd38db19b35e57ac248345cc5f
SHA256:277cd6ec84a392e1ae056129078344493fbfbf60cf15f3e88e29d26f8a6b62c7
Referenced In Project/Scope: psi-probe-rest:compile
micrometer-commons-1.14.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1

Identifiers

slf4j-api-2.0.17.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Project/Scope: psi-probe-rest:compile
slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1

Identifiers

spotbugs-annotations-4.9.3.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.9.3/spotbugs-annotations-4.9.3.jar
MD5: 6149845e438bd5a34ebaf81f8bc9e243
SHA1: 4d362bffcfdfd734999e94d7d98fde678aae71cf
SHA256:13532bfe2f45fcd491432221df72d9cd0efb8f987c9245e12befa192c8925ce3
Referenced In Project/Scope: psi-probe-rest:provided
spotbugs-annotations-4.9.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.2.2-SNAPSHOT

Identifiers

spring-core-6.2.8.jar

Description:

Spring Core

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-core/6.2.8/spring-core-6.2.8.jar
MD5: 4db163bd5ffe489aaf0d3c44f47d66e5
SHA1: 2caf1cef93252f5ef2b7f334b8b4d61f3aecad15
SHA256:27f640340164d74a0e90ee176b75d5a18a93f82fa96f444a757acf0bf3ae7257
Referenced In Project/Scope: psi-probe-rest:compile
spring-core-6.2.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1

Identifiers

spring-hateoas-2.5.1.jar

Description:

Library to support implementing representations for
		hyper-text driven REST web services.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/hateoas/spring-hateoas/2.5.1/spring-hateoas-2.5.1.jar
MD5: 2d5642542ef1527f434de00329bd02b9
SHA1: 8d01e1a635fd5be08f7c277fe3284aa7ed1568c4
SHA256:5f8c303a42253b05329cb8141b4c6d2795253adb2e51d788210f882586103f4e
Referenced In Project/Scope: psi-probe-rest:compile
spring-hateoas-2.5.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-rest@5.2.2-SNAPSHOT

Identifiers

spring-plugin-core-3.0.0.jar

Description:

Core plugin infrastructure

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/plugin/spring-plugin-core/3.0.0/spring-plugin-core-3.0.0.jar
MD5: d29a8f831dfe90d150ab694489f2e7c2
SHA1: d56aa02dd7272dca30aa598dc8b72e823227046a
SHA256:edf72d44b9cf1199cc783d620f5f86df82fb378521dac313540086e6c3c66ff0
Referenced In Project/Scope: psi-probe-rest:compile
spring-plugin-core-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1

Identifiers

spring-web-6.2.8.jar

Description:

Spring Web

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-web/6.2.8/spring-web-6.2.8.jar
MD5: 893e8b28ec10e50cbd0b99476d6e6e29
SHA1: 7b6a4ffb12639779721bc5adbc7f5ba80db72ff9
SHA256:152405afabc056dc8007dca8ef105503c7cbbb132f7d1ab75fef3e27eaabd461
Referenced In Project/Scope: psi-probe-rest:compile
spring-web-6.2.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1

Identifiers



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.